CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

Design/Logic Flaw

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

TravianZ 安全特征问题漏洞

TravianZ is a free-to-play, in-browser, web-based strategy game from German company Travian. A security vulnerability exists in TravianZ version 8.3.4, 8.3.3, which stems from a cryptographically insecure random number generator used in the password reset function allowing an attacker to guess th...

CVE-2023-36993

The CVE concerns TravianZ 8.3.4 and 8.3.3 where the password reset function uses a cryptographically insecure random number generator. This root cause permits an attacker to guess password reset parameters and take over accounts. Public sources in connected documents corroborate the same affected...

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

D-Link DIR-823G Multiple Vulnerabilities (2023 - 2025)

D-Link DIR-823G devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-823G Password Reset Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. A password reset vulnerability exists in the D-Link DIR-823G, which can be exploited by an attacker to cause a reset of the WEB...

Mitsubishi Electric MELSEC iQ-F series 安全漏洞

The Mitsubishi Electric MELSEC iQ-F series is a programmable logic controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MELSEC iQ-F series, which stems from a capture replay vulnerability that bypasses authentication and allows an unauthenticated,...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

Design/Logic Flaw

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

ILIAS 安全漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.0beta1 through 7.20 and 8.0beta1 through 8.1, which stems from a password reset feature that allows a remote attacker to take over an account...

CVE-2023-36487

CVE-2023-36487 affects ILIAS password reset functionality across ILIAS 7.0 beta1–7.20 and 8.0 beta1–8.1, enabling remote account takeover. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction needed, and high impact to confidentiali...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

PT-2023-25589 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.0 beta1 through 7.20 ILIAS versions 8.0 beta1 through 8.1 Description: The password reset function allows remote attackers to take over the account. Recommendations: For ILIAS versions 7.0 beta1 through 7.20, consider disabli...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...